@fidacy/mcp 0.6.2 → 0.6.3

package/dist/core.js

@@ -488,7 +488,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.6.2" : "dev";
+var CLIENT_VERSION = true ? "0.6.3" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";

package/dist/index.js

@@ -15,6 +15,17 @@ var __export = (target, all) => {
 };
 
 // src/config.ts
+var config_exports = {};
+__export(config_exports, {
+  auditLogPath: () => auditLogPath,
+  configDir: () => configDir,
+  configPath: () => configPath,
+  ensureState: () => ensureState,
+  hasEngineKey: () => hasEngineKey,
+  readConfig: () => readConfig,
+  resolveMandateRules: () => resolveMandateRules,
+  writeConfig: () => writeConfig
+});
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { homedir } from "node:os";
 import { join } from "node:path";
@@ -214,7 +225,7 @@ var init_telemetry = __esm({
   "src/telemetry.ts"() {
     "use strict";
     init_config();
-    CLIENT_VERSION = true ? "0.6.2" : "dev";
+    CLIENT_VERSION = true ? "0.6.3" : "dev";
     currentShell = "mcp";
     anonIdCache = null;
     buffer = [];
@@ -291,7 +302,7 @@ var init_register = __esm({
   "src/register.ts"() {
     "use strict";
     init_config();
-    CLIENT_VERSION3 = true ? "0.6.2" : "dev";
+    CLIENT_VERSION3 = true ? "0.6.3" : "dev";
   }
 });
 
@@ -583,6 +594,7 @@ var init_setup = __esm({
 // src/index.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createHash as createHash2 } from "node:crypto";
 import { z } from "zod";
 
 // src/core.ts
@@ -1267,7 +1279,7 @@ init_telemetry();
 
 // src/provision.ts
 init_config();
-var CLIENT_VERSION2 = true ? "0.6.2" : "dev";
+var CLIENT_VERSION2 = true ? "0.6.3" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -1644,8 +1656,12 @@ function renderAlertLine(alerts) {
 var state = ensureState();
 var core = makeCore();
 var subject = process.env.FIDACY_SUBJECT ?? "agent:demo";
-var SERVER_VERSION = true ? "0.6.2" : "dev";
+var SERVER_VERSION = true ? "0.6.3" : "dev";
 var bootClaim = claimUrl();
+function derivedIdempotencyKey(req) {
+  const material = [req.payee, req.amount, req.currency, req.invoiceRef ?? "", req.category ?? ""].join("|");
+  return "auto-" + createHash2("sha256").update(material).digest("hex").slice(0, 24);
+}
 var server = new McpServer(
   // The commercial identity. `name` is the stable slug hosts key on; `title` is
   // what a human reads in the client's server list. The npm package stays
@@ -1679,7 +1695,9 @@ server.registerTool(
         "Your stated reason for this payment, in your own words. It is persisted readably on the tamper-evident audit record (ALLOW and DENY alike) and becomes part of the after-the-fact proof, so write the real reason."
       ),
       category: z.string().describe("Purpose category (must be allowed by the mandate)"),
-      idempotencyKey: z.string().describe("Caller-supplied idempotency key"),
+      idempotencyKey: z.string().describe(
+        "Optional. Your own key for this payment, if you have one (an order id, a job id). Leave it out and Fidacy derives one from the payment itself, which is the safer default: a retry of the SAME payment produces the SAME key, where an invented one would not."
+      ).optional(),
       invoiceRef: z.string().describe(
         "Optional invoice identity. When set, Fidacy enforces one payment per invoice: a second request for the same invoiceRef is DENIED, at any amount."
       ).optional()
@@ -1714,7 +1732,10 @@ server.registerTool(
       };
       return { content: [{ type: "text", text: halted }], structuredContent: out2 };
     }
-    const req = args;
+    const req = {
+      ...args,
+      idempotencyKey: args.idempotencyKey || derivedIdempotencyKey(args)
+    };
     let sentinelAlerts = [];
     try {
       const [before, mandate] = await Promise.all([core.history(5e3), core.getMandate(subject)]);
@@ -2074,6 +2095,32 @@ async function main() {
     await runSetup2({ force: true });
     return;
   }
+  const allowAt = process.argv.indexOf("allow");
+  if (allowAt !== -1) {
+    const { readConfig: readConfig2, writeConfig: writeConfig2, configPath: configPath2 } = await Promise.resolve().then(() => (init_config(), config_exports));
+    const payees = process.argv.slice(allowAt + 1).filter((a) => !a.startsWith("-"));
+    if (!payees.length) {
+      console.error("Usage: npx @fidacy/mcp allow <payee> [more payees\u2026]\nApproves counterparties this agent may pay. Everything else stays denied.");
+      process.exitCode = 1;
+      return;
+    }
+    const cfg = readConfig2();
+    if (!cfg) {
+      console.error("No Fidacy config yet. Run the agent once (or `npx @fidacy/mcp setup`) so the install exists, then approve a payee.");
+      process.exitCode = 1;
+      return;
+    }
+    const mandate = { ...cfg.mandate ?? {} };
+    const current = Array.isArray(mandate.payees) ? mandate.payees : [];
+    const added = payees.filter((p) => !current.includes(p));
+    mandate.payees = [...current, ...added];
+    writeConfig2({ ...cfg, mandate });
+    console.error(
+      added.length ? `Approved ${added.map((p) => `"${p}"`).join(", ")}. This agent may now pay ${added.length === 1 ? "that counterparty" : "those counterparties"} within the mandate's caps; everything else is still denied.
+Written to ${configPath2()}. The firewall picks it up on the next call, no restart needed.` : `Already approved: ${payees.map((p) => `"${p}"`).join(", ")}. Nothing changed.`
+    );
+    return;
+  }
   const transport = new StdioServerTransport();
   await server.connect(transport);
   if (state.firstRun) recordInstall();

package/dist/lib.js

@@ -643,7 +643,7 @@ function resolveMandateRules(cfg) {
 }
 
 // src/telemetry.ts
-var CLIENT_VERSION = true ? "0.6.2" : "dev";
+var CLIENT_VERSION = true ? "0.6.3" : "dev";
 function bandOf(amount) {
   if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) return void 0;
   if (amount < 10) return "lt10";
@@ -831,7 +831,7 @@ function requestUpgrade() {
 }
 
 // src/provision.ts
-var CLIENT_VERSION2 = true ? "0.6.2" : "dev";
+var CLIENT_VERSION2 = true ? "0.6.3" : "dev";
 function provisionEnabled() {
   const v = (process.env.FIDACY_DISABLE_PROVISION ?? "").trim().toLowerCase();
   return !(v === "1" || v === "true" || v === "yes");
@@ -994,7 +994,7 @@ function activationBootLine() {
 }
 
 // src/register.ts
-var CLIENT_VERSION3 = true ? "0.6.2" : "dev";
+var CLIENT_VERSION3 = true ? "0.6.3" : "dev";
 function endpoint3() {
   const base = (process.env.FIDACY_ENGINE_URL ?? "https://api.fidacy.com").replace(/\/$/, "");
   return `${base}/v1/register`;

package/dist/postinstall.js

@@ -134,7 +134,7 @@ var init_register = __esm({
   "src/register.ts"() {
     "use strict";
     init_config();
-    CLIENT_VERSION = true ? "0.6.2" : "dev";
+    CLIENT_VERSION = true ? "0.6.3" : "dev";
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "author": "Fidacy (ZeepCode Group Technology LLC) <hello@fidacy.com> (https://fidacy.com)",